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(57) Abstract: The invention deals with the management of phone numbers attribution after replacement of a smart card (SCA), 
particularly a SIM card, by a new smart card (SCB). Said smart card (SCA) is coupled to a communication device (CD) being able 
to communicate with a network Said smart card (SCA) stories at least one parameter (IMSI A , ADM A , Ki A ) attached to a first current 
phone number (MSISDN A ). The following steps are performed in order to keep his old phone number when replacing his current 
card by a new one: A service-inserting step, in which the new smart card (SCB) storing at least one parameter (IMSIB, ADMB, KiB) 
attached to the second phone number (MSISDNB) is inserted in the communication device; A service-replacing step, in which an 
application server (AS) sends a message (M2) for replacing, in the new smart card (SCB), parameters (IMSI B , ADM B , Ki B ) attached 
to the second phone number (MSISDN B ) by parameters (IMSI A , ADM A , Ki A ) attached to the first phone number (MSISDN A ); A 
service-using step, in which the user now uses the second smart card (SCB) with the phone number (MSISDN A ) previously attached 
to the first smart card (SCA). 
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Retention of old mobile number on SIM card replacement 
Technical field 

This invention relates, in general, to a communication system (and architecture 
5 thereof) and is particularly, but not exclusively, applicable to the management of 
the association of International Mobile Subscriber Identities (IMSIs) and Mobile 
Subscriber Integrated Service Digital Network (MSISDN) numbers for cellular 
communication system architecture. 

The solution described in the following sections is targeted at improving the 
10 GSM activation process in cases where an existing GSM subscriber seeks to 
replace his SIM card, but wishes to retain his / her old mobile number. 
Any type of communication device can be coupled with the SIM card. This 
communication device can be onboard or not. Note that an onboard system is 
for example a mobile telephone, an electronic assistant, a portable computer, 
15 etc. In the other hand, a system which is not onboard can be a personal 
computer (PC), a Point of Sale (POS), etc. 

The invention is not limited to SIM cards but can be extended to any emerging 
or future portable object whose use would be similar to that of the SIM card use. 
In the below description, the example which will be used to illustrate the 
20 invention will be that of a smart card coupled to mobile phone. 

Prior Art 

A mobile number (MSISDN) is assigned to a SIM card (IMSI and Ki) in various 
elements of a GSM network. These network elements include, among others - 
25 Authentication Centre (AuC), Customer Care & Billing System (CCBS), Home 
Location Register (HLR), Mobile Switching Centre (MSC). 
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If an existing subscriber, for example identified by way of the following 
parameters (MSISDN A , IMSI A , Ki A ) seeks a SIM card replacement and at the 
same time wishes to retain his old mobile number, the new card details (say 
IMSIb, Ki B ) have to be assigned to his old number (MSISDN A ). 
5 Currently, re-assignment of old mobile number to a new SIM card is a 
cumbersome process involving manual intervention & processes on the part of 
the GSM operator. These manual processes imply wastage of effort, time and 
money. For the end user, the present process is inconvenient, as several 
manual checks have to be applied. 

10 

Summary of the invention 

The proposed solution seeks to facilitate retention of old number in case of SIM 
card replacement. 

15 To achieve this objective, according to the invention, the management of the 
phone numbers is performed according the following steps: 

- A service-inserting step, in which the subscriber inserts a new smart card 
containing at least one parameter attached to the second phone number; 

- A service-replacing step, in which the application server sends a 
20 message (M2) for replacing, in the new smartcard, parameters attached 

to the second phone number by parameters attached to the first phone 
number, 

- A service-using step, in which a user uses the second smart card with 
parameters attached to the first smartcard. 

25 

With the invention, when the new card is inserted in the communication device, 
the new parameters attached to the new card are deleted/deactivated and 
replaced by the old parameters attached to the old card. So, we see that a user 
can keep his old phone number by way of a simple process. 
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In the drawings: 

Figure 1 is a diagrammatic view of the architecture to which the invention can be 
applied. 

5 Figure 2 illustrates the communication between the card to be replaced and the 
application server. 

Figure 3 illustrates the communication between the new card and the 
application server. 

10 Description of an example illustrating the invention 

Figure 1 represents an example of a system to which the invention can be 
applied. 

15 In our example, the system comprises the following elements: 

- a card SCA 

- a card SCB 

- an application server AS. 

20 In our example, initially, the card SCA is coupled to a mobile phone MOB. The 
mobile phone communicates with the application server AS by way of a network 
RES. In our example, the application server AS communicates with network 
elements NLT (HLR, AuC, Billing System, etc.). 

In our example, the network RES is a GSM network. This example is not 
25 limitative; in another embodiment, for example if the communication device is a 
point of sale, the network could be Internet or a direct phone line. 

In our example, a subscriber wishes to replace his SIM card SCA (with IMSI A , 
Ki A assigned to MSISDN A ). The subscriber purchases (or is given by the 



WO 2004/036942 




CT/IB2003/004563 



4 

operator under some promotion / loyalty scheme) a new SIM card SCB (IMSI B , 
Ki B ). The new SIM card B, might (or might not) have an assigned mobile number 
(MSISDNq). In any case, this solution envisages new cards with pre-assigned 
mobile numbers. 

The subscriber wants to replace his old card SCA by his new card SCB without 
changing his phone number MSISDN A . 

The old card SCA includes, amongst other data, 

- the parameters IMSI A Ki A which enable access to the network, 

- ADM Key A - administrative keys that allow update of data present in the 
card. 

On the network (HLR, AuC, Billing System, etc.), MSISDN A is assigned to this 
card SCA. 

The new card SCB, that the subscriber wants to use, includes amongst other 
data, 

- a couple IMSI B Ki B which enable access to the network, 

- and ADM Key B - administrative keys that allow update of data present in 
the card. 

On the network (HLR, AuC, Billing System, etc.), the parameter MSISDN B is 
assigned to the new card SCB. 

In our example, the application server AS incorporates OTA (Over The Air) 
25 functionalities, i.e., the mechanism to send an APDU (embedded in a special 
SMS) to the card. When the SIM card receives such a SMS, it is interpreted 
accordingly and the embedded APDU is implemented by the card's operating 
system. In the present case, the embedded instructions include - verify key, 
update file data, etc. The server AS also has a module to interface securely with 
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network elements NLT (ex: HLR, Billing System, etc.) forgetting details of cards 
SCA &SCB. 

In our illustrated example, the process is the following (each step 1 to 4 is 
5 identified by a number which is also visible on figure 1). Figure 1 illustrates the 
communication steps between the card SCA and the application server AS. 

Step 1: 

With card SCA in the mobile, the subscriber sends a SMS including the new 
1 0 mobile number (MSISDN B ) assigned to the new card SCB. The message is sent 
to a pre-defined number assigned to an Application server AS. 

In our example, the subscriber simply goes to the "Messages" option on his / 
her mobile phone, types in a field the new parameter MSISDN B , and sends 
the corresponding SMS to the number assigned to the Application server 
15 AS. All these steps could be printed on a brochure / flyer given along with 
new SIM card SCB, and the subscriber simply follows the instructions. 
Advantageously, some programs make sure that the user (who has bought 
the new card) is initiating the process, and that the new card SCB is a valid 
replacement card. Moreover, to get the details of the 2 cards on which the 
20 operation is to be performed. 

Step 2: 

Using information obtained from the origin (MSISDN A ) and the content 
(MSISDNb) of the SMS, the application server AS requests the network for 
25 details corresponding to cards SCA and SCB. In our illustrated example, these 
details include the following sets of parameters (IMSI A Ki A ADM Key A ) and 
(IMSIb Ki B ADM Key B ) corresponding to MSISDN A and MSISDNB, respectively . 
Depending on the network architecture & data policy, the Application Server 
AS, could be interfaced with one or several network elements (HLR, Billing 
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System, AuC). Or else, and if possible, the server AS could get details of 
SCA and SCB from a separate database managing SIM cards that is 
maintained by the operator for administrative purposes. 

5 Step 3: 

In our example, and for secure the transmission of data on the network, the 
Application server sends an encrypted SMS to MSISDNA (card SCA) which 
destroys the couple IMSIA/KiA in the card. Preferably, the message is encrypted 
in using ADM KeyA. More specifically, this would imply updating IMSI and Ki 
10 values with data that is impertinent to the network. For all practical purposes, 
this would render the card unusable. 

On the subscriber side, the message could be : « Now insert new card in 
handset . » 

Generally, in OTA messages, there are 3 levels of security 
15 - Signature (the sending entity should be acceptable by the card), 
Encryption 

- and synchronization (there is an incrementing synchronization counter in 
the card, and the card will accept a special OTA message only if it 
contains the right synchronization count). 
20 Depending on operator requirements, we could incorporate all or any of 
these features. Encryption is required particularly for end-to-end security. 
IMSI - Ki values being sensitive data, in our illustrated example, the operator 
might seek assurance on data integrity. On the card side, the necessary 
algorithm shall be embedded to allow processing (decryption) of encrypted 
25 messages received from the Application Server AS. 

Before executing the following steps, the subscriber takes out the card SCA, 
and inserts the new card SCB in the phone. 
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Step 4 

The new card SCB is not inserted in the phone MOB. In step 4, the subscriber 
now logs on to the network with the new mobile number (MSISDNB) assigned to 
the new card SCB. 

5 

. Step 5 

Using ADM KeyB, the Application server sends an encrypted message SMS to 
the new card SCB using the parameter MSISDN B . This message updates the 
couple IMSIB/KiB values in the new card SCB with the old one IMSIA/KiA 
10 corresponding to the card SCA to be replaced. In our example, the parameters 
(ADM, KeyB) are also updated with the parameters (ADM.KeyA) corresponding 
to the old card SCA and subsequently the card is also « refreshed ». In our 
example, the parameters ADM key is updated to permit future, if any, OTA 
administration of the card. 

15 

In our implementation, the message sent to the new card SCB during step 5 is 
preferably sent during step 3, at the same time that the message is sent to card 
SCA. However, the new card SCB will receive the message only after it has 
been inserted in the mobile phone. 
20 Step 6 

In step 6, upon « refresh », the mobile reads the updated values - IMSI A Ki"a , 
and logs on to the network with the old phone number (MSISDNa). 

In our illustrated example, ADM is updated. Nevertheless, this example is not 
25 limitative. Updating ADM is interesting for verifying the ADM key for updating 
files. Updating ADM can be avoided, by assigning old ADM key (of SCA) to new 
card SCB, on the network. 
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Generally, we have seen that during the service-information step, the 
communication device CD, while containing first smart card SCA, sends a 
message M1 to an application server AS, the message M1 including at least 
one parameter MSISDNB identifying the phone number assigned to second 
5 smart card SCB, which will be used to replace the first smart card SCA. 

Before the service-inserting step, the application server AS sends a secure 
message M3 for deleting, in the first smart card SCA, parameters (IMSI A , ADM A 
,Ki A ) attached to the first phone number MSISDN A . So that, we are sure that this 
10 couple won't be reuse by another user. 

The message M3 is encrypted, the encryption being performed by using an 
encryption key (belonging to the set of keys ADM A ) attached to the first smart 
card SCA, and by using an algorithm that resides both on the Application Server 
15 AS, and on the smart card SCA. 

In the same manner, we have seen that, for the service replacing step, the 
application server AS sends a secure message M3 to the new smart card SCB. 
The message M3 is encrypted, the encryption being performed by using an 
20 encryption key (belonging to the set of keys ADM B ) attached to the new smart 
card SCB, and by using an algorithm that resides both on the Application Server 
AS, and on the smart card SCB. 

By this way, all the data transiting between the card and the application server 
are secure. Moreover, the use of the encryption keys stored in the card avoids 
25 adding supplementary keys in the card and in the application server. 

We have also seen that, after the for the service using step, the communication 
device logs on to the network using said new smart card (SCB) and said old 
parameters (MSISDN A , IMSI A , ADM A , Ki A ). 
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The invention also deals with an application server (AS) which comprises a 
program able to perform some steps. 

a. A receiving step, in which the server receives a message from said 
5 first portable object SCA, said message requesting a replacement 

of said first portable object by the second portable object; 

b. A sending step, in which the application server AS sends, after the 
user has inserted said second portable object in said 
communication device, a message M2 for replacing, in said 

10 second portable object SCB, parameters (IMSI B , ADM B , Ki B ) 

attached to the second phone number MSISDN B by parameters 
(IMSI A) ADM a , Ki A ) attached to the first phone number MSISDN A ; 

The invention also deals with a portable object SCB comprising parameters 
15 (IMSI B , ADM B , Ki B ) attached to a phone number MSISDN B in particular a SIM 
card, characterized in that it comprises a microcontroller including a program for 
performing the following steps: 

o A receiving step in which said microcontroller receives a request 
for modifying some parameters (IMSI B , ADM B , Ki B ) attached to 
20 said phone number (MSISDN B ) by new parameters (IMSI A , ADMa, 

Ki A ) attached to another first phone number (MSISDN A ); 
o A using step, in which, once the parameters are modified, the 
portable object uses new parameters when communicating with 
the network e.g. with any data processing system able to 
15 communicate with the card, for example the application server AS. 

In our example, we have seen that the messages are SMS messages. This 
example is not limitative; all kind of messages (MMS, etc.) can be used for 
implementing the invention. 
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We see now that the invention offers various advantages. All GSM operators 
could use the solution. In our illustrated example, the solution uses SMS for 
seamless mobile number retention. This makes it convenient for the user. He 
5 could do the SIM card replacement sitting at home. This solution also avoids 
modifying network components. All is performed using Over The Air (OTA) 
changes on the SIM card(s). Moreover, the invention is based on a secure 
message based process. 
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Claims 



1 ) Method for managing phone numbers attribution after replacement of a 
first portable object (SCA), particularly a SIM card, by a second portable 
5 object (SCB), said first portable object (SCA) being coupled to a 

communication device (CD) being able to communicate with a network, 
said first portable object (SCA) storing at least one parameter (IMSI A , 
ADM A , Ki A ) attached to a first current phone number (MSISDN A ), 
characterized in that it comprises the following steps: 
10 2) A service-inserting step, in which the second portable object (SCB) 
storing at least one parameter (IMSI B , ADM B , Ki B ) attached to the second 
phone number (MSISDN B ) is inserted in the communication device (CD); 

3) A service-replacing step, in which an application server (AS) sends a 
message (M2) for replacing, in the second portable object (SCB), 

15 parameters (IMSI B , ADM B , Ki B ) attached to the second phone number 

(MSISDN B ) by parameters (IMSI A , ADM A , Ki A ) attached to the first phone 
number (MSISDN A ); 

4) A service-using step, in which the user now uses the second portable 
object (SCB) with the phone number (MSISDN A ) previously attached to 

20 the first portable object (SCA). 



5) Method according to claim 1, characterized in that, for the service- 
information step, the communication device (CD), while containing first 
portable object (SCA), sends a message (step 1) to an application server 
(AS), this message including at least one parameter (MSISDNB) 
identifying the phone number assigned to said second portable object 
(SCB), which will be used to replace the first portable object (SCA). 
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6) Method according to claim 1, characterized in that, before the service- 
inserting step, the appiication server (AS) sends a secure message (step 
3) for deleting, in the first portable object (SCA), parameters (IMSI A , 
ADM A ,Ki A ) attached to the first phone number (MSISDN A ). 

7) Method according to claim 3, characterized in that the message (M3) is 
encrypted, the encryption being performed by using an encryption key 
attached to the portable object (SCA), and by using an algorithm that 
resides both on the Application Server (AS), and on the portable object 
(SCA). 

8) Method according to claim 1, characterized in that, for the service 
replacing step, the application server (AS) sends a secure message (M3) 
to said second portable object (SCB). 

9) Method according to claim 5, characterized in that the message is 
encrypted, the encryption being performed by using an encryption key 
attached to the second portable object (SCB), and by using an algorithm 
that resides both on the Application Server (AS), and on the second 
portable object (SCB). 

10) Method according to claim 1, characterized in that, for the service using 
step, the communication device (CD) logs on to the network using said 
second portable object (SCB) and said old parameters (MSISDN A , IMSI A , 
ADM A , Ki A ). 

11) Application server (AS) able to communication with a communication 
device (CD), said server storing all the parameters attached to at least 
two portable objects, a first portable object (SCA) to be replaced and a 
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second portable object (SCB), characterized in that it comprises a 
program able to perform the following steps: 

a. A receiving step, in which the server receives a message from said 
5 first portable object (SCA), said message requesting a 

replacement of said first portable object by the second portable 
object; 

b. A sending step, in which the application server (AS) sends, after 
the user has inserted said second portable object in said 

10 communication device, a message (M2) for replacing, in said 

second portable object (SCB), parameters (IMSI B , ADM B , Ki B ) 
attached to the second phone number (MSISDN B ) by parameters 
(IMSI A , ADM a , Ki A ) attached to the first phone number (MSISDN A ); 

15 12) A portable object (SCB) comprising parameters (IMSI B , ADM B) Ki B ) 
attached to a phone number (MSISDN B ) in particular a SIM card, 
characterized in that it comprises a microcontroller including a program 
for performing the following steps: 

a. A receiving step in which said microcontroller receives a request 
20 for modifying some parameters (IMSI B , ADM B , Ki B ) attached to 

said phone number (MSISDN B ) by new parameters (IMSI A , ADM A , 
Ki A ) attached to another first phone number (MSISDN A ); 

b. A using step, in which, once the parameters are modified, the 
portable object uses new parameters when communicating with 

25 the network (AS). 
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